<clickhouse>
    <openSSL>
        <server>
            <certificateFile>/etc/clickhouse-server/config.d/server.crt</certificateFile>
            <privateKeyFile>/etc/clickhouse-server/config.d/server.key</privateKeyFile>
            <dhParamsFile>/etc/clickhouse-server/config.d/dhparam.pem</dhParamsFile>
            <verificationMode>none</verificationMode>
            <cacheSessions>true</cacheSessions>
        </server>
        <client>
            <cacheSessions>true</cacheSessions>
            <verificationMode>none</verificationMode>
            <invalidCertificateHandler>
                <name>AcceptCertificateHandler</name>
            </invalidCertificateHandler>
        </client>
    </openSSL>
    <interserver_https_port>9010</interserver_https_port>
    <interserver_http_port remove="1"/>
</clickhouse>
